$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft File: XnKqfVsdVjLl0z_scvp0M_Sc4po.mft (raw, json) Hash identifier: Al3d0hX+o1yxznGwUeDGyu0LPtSKVNx5XzPulQvGrCc= Subject key identifier: 95:BB:62:90:2A:FA:25:F8:52:CF:93:DA:ED:5C:CF:F3:CA:8C:DD:64 Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A Certificate issuer: /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft Manifest number: 0251 Signing time: Fri 25 Sep 2026 02:44:29 +0000 Manifest this update: Fri 25 Sep 2026 02:44:28 +0000 Manifest next update: Fri 02 Oct 2026 02:44:28 +0000 Files and hashes: 1: XnKqfVsdVjLl0z_scvp0M_Sc4po.crl (hash: MC2/N/APq05+XGV+EcaIt9tPSOPky6WeEDft5o6L/q0=) 2: 99341DD6663D11EE8CBBAE7CC4F9AE02.roa (hash: MCZY8TcdrHRZrLBUjIYxaW3GviqDbhXanSznbYkRJNw=) 3: 98BE8828663D11EE8CBBAE7CC4F9AE02.roa (hash: 60mmp2xkt956dxyjxxyqpf2kD3SD5zTs5NXxpAz3Fmk=) 4: 9830B6D8663D11EE8CBBAE7CC4F9AE02.roa (hash: pcDD9YbNb3qCe0sHsz+XMj1O2bqfga6lzkQW7K0JeOI=) 5: 678C24C0663F11EEBD955D43C4F9AE02.roa (hash: YHtjLyAXEGFuWuiIIOzXr+jeSKAYlLoGk3pKl4f1Sjg=) 6: 00E626A4A57611EF98285E5FC4F9AE02.roa (hash: 7+C/2L+WKOdEH1KPhli+JgCKdoROk+TjdXP5dk7JJEE=) 7: 36C31E00637111EEA51CA05EC4F9AE02.roa (hash: k6hiSh/WFo6akSjWYkoigb0PhpCRTQBWZ0EKHh/r2Og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Validity Not Before: Sep 25 02:44:28 2026 GMT Not After : Oct 2 02:44:28 2026 GMT Subject: CN=6ab5e00d-609e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:f9:f6:45:1b:4c:5f:33:62:79:1e:98:d5: ff:0a:6f:cd:16:6d:cc:79:5b:bb:2b:c1:1a:0f:6c: 54:fd:ba:fa:19:7b:69:22:05:d0:bf:5c:6e:da:68: 24:5c:26:cd:83:dc:2b:40:6a:1f:cd:6b:e1:39:cb: 04:1b:9a:65:8d:b2:72:3a:4c:ad:aa:1a:a3:36:c7: ca:68:c2:61:9f:4b:57:5e:07:75:5f:1d:65:dd:45: 4a:74:36:c4:62:b0:2a:00:56:6f:07:ad:3f:1a:d6: a8:b0:5f:2e:b0:92:ed:14:bf:26:27:73:79:6e:28: 4f:cd:35:fe:ad:08:6d:e9:ab:03:26:a2:72:5b:61: 69:77:f0:bd:9c:5c:74:3e:15:5c:6c:c2:36:22:66: e7:33:5a:bb:df:bf:f2:0f:c0:92:2b:7e:52:3e:37: 92:f9:c5:1e:7e:6a:71:2f:29:fc:1c:31:17:eb:3a: 5b:d3:f7:6c:a7:66:d4:e8:25:e1:d7:40:cd:9e:3d: cc:e4:1c:a0:9c:14:f0:99:2a:8b:fb:0b:17:09:a8: db:c1:91:4d:fb:66:b2:f5:3e:7a:42:4c:bf:f0:78: a5:fb:13:e0:a5:b2:03:d3:29:46:7f:4a:63:3f:3f: fc:fe:ee:d8:4e:d4:47:d0:ca:d1:fc:cd:3d:70:f2: a5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BB:62:90:2A:FA:25:F8:52:CF:93:DA:ED:5C:CF:F3:CA:8C:DD:64 X509v3 Authority Key Identifier: keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8d:88:d6:52:43:06:53:99:ec:04:69:02:23:d6:77:e5:8c: 0c:ea:33:0d:38:42:a8:e9:da:94:cb:f8:03:48:0d:a1:10:43: ed:b4:4e:78:e2:fe:80:6d:aa:37:b1:d0:f4:af:0f:a9:39:d7: 4c:89:3b:27:27:0f:7b:8f:00:45:b5:e1:2c:67:ec:26:cd:ff: b0:6e:e1:09:80:a0:bb:c8:75:ba:9c:33:74:2b:91:94:f6:cd: 68:1a:55:b0:b1:86:77:e5:94:d0:e5:71:0d:a0:a8:72:d5:86: da:6d:c5:d5:e1:b3:ee:67:a9:b1:5c:34:e7:9d:41:08:7a:04: e3:be:f7:3e:f7:34:6b:5d:84:88:d0:8a:42:c8:90:7f:4d:bf: ef:93:cd:74:4a:af:1a:53:92:07:0d:e2:25:56:c1:4e:ed:b1: 6e:c0:76:dd:2d:45:59:e7:38:f5:e6:51:25:e3:01:5c:ef:1c: b4:58:a6:4b:77:9f:98:b5:f6:b3:fb:6e:9d:f3:e5:87:58:b6: b5:1d:70:54:f9:58:57:9a:23:1b:f0:52:fc:ab:71:7f:4d:22: ac:be:0b:9f:d4:26:30:60:00:a0:cb:0a:ff:11:3b:92:eb:4e: 98:3b:9d:02:1d:6e:27:39:8e:ea:40:34:13:16:7e:6a:98:c3: 79:85:49:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFODIxMTAvBgNVBAUTKDVFNzJBQTdENUIxRDU2MzJFNUQzM0ZFQzcyRkE3NDMz RjQ5Q0UyOUEwHhcNMjYwOTI1MDI0NDI4WhcNMjYxMDAyMDI0NDI4WjAYMRYwFAYD VQQDEw02YWI1ZTAwZC02MDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7v59kUbTF8zYnkemNX/Cm/NFm3MeVu7K8EaD2xU/br6GXtpIgXQv1xu2mgk XCbNg9wrQGofzWvhOcsEG5pljbJyOkytqhqjNsfKaMJhn0tXXgd1Xx1l3UVKdDbE YrAqAFZvB60/GtaosF8usJLtFL8mJ3N5bihPzTX+rQht6asDJqJyW2Fpd/C9nFx0 PhVcbMI2ImbnM1q737/yD8CSK35SPjeS+cUefmpxLyn8HDEX6zpb0/dsp2bU6CXh 10DNnj3M5BygnBTwmSqL+wsXCajbwZFN+2ay9T56Qky/8Hil+xPgpbID0ylGf0pj Pz/8/u7YTtRH0MrR/M09cPKlzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJW7YpAq +iX4Us+T2u1cz/PKjN1kMB8GA1UdIwQYMBaAFF5yqn1bHVYy5dM/7HL6dDP0nOKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9FQTdFNUZBNjYz NkYxMUVFOTdDNzRCNUNDNEY5QUUwMi9YbktxZlZzZFZqTGwwel9zY3ZwME1fU2M0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huS3FmVnNkVmpMbDB6X3NjdnAwTV9TYzRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU4Mi9FQTdFNUZBNjYzNkYxMUVFOTdDNzRCNUNDNEY5QUUwMi9YbktxZlZzZFZq TGwwel9zY3ZwME1fU2M0cG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK42I1lJDBlOZ7ARpAiPWd+WMDOozDThCqOnalMv4A0gNoRBD7bROeOL+gG2q N7HQ9K8PqTnXTIk7JycPe48ARbXhLGfsJs3/sG7hCYCgu8h1upwzdCuRlPbNaBpV sLGGd+WU0OVxDaCoctWG2m3F1eGz7mepsVw0551BCHoE4773Pvc0a12EiNCKQsiQ f02/75PNdEqvGlOSBw3iJVbBTu2xbsB23S1FWec49eZRJeMBXO8ctFimS3efmLX2 s/tunfPlh1i2tR1wVPlYV5ojG/BS/Ktxf00irL4Ln9QmMGAAoMsK/xE7kutOmDud Ah1uJzmO6kA0ExZ+apjDeYVJQw== -----END CERTIFICATE-----Generated at Sat Sep 26 07:01:18 2026 by rpki-client